TWI831082B - Biosignature verification system and biosignature verification method - Google Patents

Abstract

A biometric signature verification system and biometric signature verification method. The biometric signature verification method enables a fingerprint pen to generate a first verification based on the encrypted identification data stored when it determines that the fingerprint data it obtains matches the stored fingerprint template. data; causing the handwriting input device to sense and obtain the written handwriting pattern, and encrypt the first verification data and the handwriting pattern to generate second verification data; and causing the authentication server to decrypt the second verification data to obtain the first verification data and the handwriting pattern, and when it is determined that the handwriting pattern matches the stored handwriting template, the encrypted identification data is decrypted to obtain the identity identification information. Through the design of the biometric signature verification method implemented by the biometric signature verification system, the accuracy and security of identity verification during transactions can be greatly improved.

Description

Biosignature verification system and biosignature verification method

The present invention relates to a digital signature system, and in particular, to a biometric signature verification system and biometric signature verification method that combines fingerprint verification.

With the advancement of technology, digital signatures have become a common method used by banks to confirm customer identities and merchants to confirm customer signatures. When performing digital signatures, businesses usually provide a touch-sensitive writing pad for customers to sign with a stylus, and then capture the signature handwriting or signature screen on the touch-sensitive writing pad for identification purposes. Signature certification. In addition, when consumers log in to e-commerce websites to make purchases or log in to bank web pages to handle business at home, some e-commerce and banks will require digital signature authentication. Consumers will use a stylus to sign on their own computer devices to allow the e-commerce The operating systems of merchants and banks can obtain consumers’ digital signatures for identity authentication.

However, because signature handwriting can be imitated, and digital signature images can also be forged and uploaded for verification through other methods, relevant businesses cannot confirm whether the person signing is actually the person signing, and it is difficult for consumers to prevent them from being used as signatures. Some digital signatures The device is imitated by others to forge signatures for consumption.

Therefore, an object of the present invention is to provide a biosignature verification method that can improve at least one shortcoming of the prior art.

Therefore, the biometric signature verification method of the present invention includes the following steps: a fingerprint verification step, in which a fingerprint pen determines that the fingerprint data obtained by it is consistent with a fingerprint template stored in it, and uses an encrypted identification data stored in it. Generate a first verification data; the handwriting input verification step causes a handwriting input device to obtain the first verification data, senses and obtains a handwriting pattern written by the collision, and causes the handwriting input device to convert the first verification data The data and the handwriting pattern are encrypted to generate a second verification data; and the identity verification step causes a certification server to decrypt the second verification data to obtain the first verification data and the handwriting pattern, and determine whether the handwriting pattern and the handwriting pattern are the same. When a handwriting template in the stored personal authentication information matches, the encrypted identification information in the first authentication information is decrypted to obtain an identity identification information.

Therefore, the biometric signature verification method of the present invention includes the following steps: a fingerprint verification step in which a fingerprint pen stores an encrypted identification data when it senses and determines that the fingerprint data it obtains is consistent with a fingerprint template it has stored. Encrypt to generate a first verification data; the handwriting input verification step causes a handwriting input device to receive and decrypt the first verification data to obtain the encrypted identification data, and sense and obtain a handwriting pattern written by the collision, and causing the handwriting input device to combine the encrypted identification data with the The handwriting pattern is encrypted to generate a second verification data; and the identity verification step causes an authenticator server to decrypt the second verification data to obtain the encrypted identification data and the handwriting pattern, and determine whether the handwriting pattern is the same as the stored one. When a handwriting template in the personal authentication data matches, the encrypted identification data is decrypted to obtain an identification data.

Therefore, another object of the present invention is to provide a biometric signature verification system that can improve at least one shortcoming of the prior art.

Therefore, the biometric signature verification system of the present invention includes a fingerprint pen, a handwriting input device and an authentication server for executing the aforementioned biometric signature verification method.

The effect of the present invention is that through the design of the biometric signature verification method executed by the biometric signature verification system, the accuracy of identity verification and transaction security during transactions can be greatly improved. It is a quite innovative invention.

200: Biosignature verification system

3: Fingerprint pen

30: Fingerprint sensing part

31:Control keys

4:Handwriting input device

5:Authentication server

600: Fingerprint verification steps

601~605: Sub-steps

700: Handwriting input verification steps

701~704: Sub-steps

701’, 704’: sub-steps

800: Identity verification step

801~807: Sub-steps

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, in which: Figure 1 is a schematic structural diagram of an embodiment of the biosignature verification system of the present invention; Figure 2 is a schematic diagram of the biosignature verification system. A step flow chart of a first embodiment of the biometric signature verification method executed by the system embodiment; Figure 3 is a fingerprint verification step of the first embodiment of the biometric signature verification method. Figure 4 is a flow chart of a handwriting input verification step of the first embodiment of the biometric signature verification method; Figure 5 is a flow chart of an identity verification step of the first embodiment of the biometric signature verification method. ; Figure 6 is a flow chart of the handwriting input verification steps of a second embodiment of the biosignature verification method performed by the biosignature verification system embodiment; and Figure 7 is the second implementation of the biosignature verification method. A flowchart of the identity verification steps for an example.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are designated with the same numbering.

Referring to Figures 1 and 2, a first embodiment of the biometric signature verification method of the present invention is suitable for implementation in a biometric signature verification system 200 through electronic circuits, firmware and/or software programs, and can be used for a A user can perform identity verification when making online financial transactions or online shopping. It can also be used for a user who can perform identity verification when making physical transactions at a bank or store. The biometric signature verification system 200 includes a fingerprint pen 3, a handwriting input device 4 and an authentication server 5 for cooperating with the biometric signature verification method.

The fingerprint pen 3 is owned by the user, has the function of sensing and reading fingerprints, and stores a fingerprint template and an encrypted identification data pre-created by the user, and can use wired and/or wireless communication technology signals The handwriting input device 4 is connected for data transmission.

The handwriting input device 4 may be owned by the user, or by the bank or store. The handwriting input device 4, such as but not limited to touch-operated smart phones, tablets and laptops, can be used for touch writing by the fingerprint pen 3, and can be connected to the fingerprint pen 3 through wired and/or wireless communication technology signals. Authentication server 5 for data transmission.

The authentication server 5, such as but not limited to the transaction server of an online bank or online shopping platform, can be used to directly authenticate the user's identity when the user logs in to perform transactions. In other implementations, the authentication server 5 can also be a third-party authentication server used to assist online banks, online shopping platforms, physical banks or stores to perform third-party authentication. It can be used when the user logs in to the website. When conducting transactions with the transaction server of a bank or online shopping platform, assist the aforementioned transaction server in verifying the identity of the user, or when the user conducts physical transactions at the physical bank or store, assist in identity verification. The authentication server 5 stores a personal authentication information registered and created by the user. The content of the personal authentication information is, for example, but not limited to, handwriting template, registered identity information (such as, but not limited to, ID card number, phone number or membership number). , and other information that can be used for identity verification.

The wireless communication technology includes, but is not limited to, currently known various Internet technologies and mobile communication technologies, such as, but is not limited to, WiFi and Bluetooth, as well as mobile communication technologies such as 4G and 5G.

Referring to Figures 1, 2, and 3, the first embodiment of the biometric signature verification method includes a fingerprint verification step 600, a handwriting input verification step 700, and an identity verification step 800.

The fingerprint verification step 600 includes the following sub-steps:

Sub-step 601. When the identity of the user is to be verified through the authentication server 5, the user can hold the fingerprint pen 3 and touch the finger whose fingerprint is intended to be collected to the fingerprint sensing part 30 of the fingerprint pen 3. The fingerprint sensing part 30 of the fingerprint pen 3 performs fingerprint scanning and acquisition to obtain a fingerprint data, and continues to execute sub-step 602.

In this sub-step 602, the fingerprint pen 3 is used to analyze and capture the feature points of the fingerprint data through currently known fingerprint feature capture technology, such as but not limited to fingerprint area detection and image enhancement of fingerprint data. , image processing such as image binarization and thinning, and technologies such as fingerprint morphology and detail feature extraction processing of fingerprint data. Then, the fingerprint pen 3 will compare with the stored fingerprint template to determine whether the characteristic points of the fingerprint data match. If it is determined that they do not match, that is, the fingerprint data is incorrect, then sub-step 603 is executed to cause the fingerprint pen 3 to generate an indication message indicating that the fingerprint is incorrect. If the judgment is consistent, it means that the fingerprint data is correct, then continue to execute sub-step 604 and Sub-step 605.

In this sub-step 604, the fingerprint pen 3 is caused to generate an instruction message indicating that the fingerprint verification has been passed, and then its contact pressure sensing function is activated, which will sense the force exerted by the pen tip when it is pressed against an object for writing. The contact pressure data is, for example, the contact pressure when the handwriting input device 4 performs touch writing. The content of the collision pressure data includes but is not limited to the variation trend of the collision pressure experienced when each stroke is written during touch writing, and the start and end time of the pressure variation trend measured for each stroke. In this embodiment, the fingerprint pen 3 will be deemed to have been operated to write a stroke each time it senses that the pen tip is touched until the touch is interrupted.

In this embodiment, after writing with the fingerprint pen 3, the user can operate a control key 31 on the fingerprint pen 3 to control the fingerprint pen 3 to end the acquisition operation of the contact pressure data. However, during implementation, in another embodiment of the present invention, the fingerprint pen 3 can be changed to determine that the fingerprint data is correct, but the pen tip is not pressed again for more than a predetermined time, such as but not limited to more than 2 seconds. seconds or 3 seconds, or instead, when the fingerprint pen 3 no longer senses fingerprints at the fingerprint sensing part 30 for more than a predetermined time, such as but not limited to more than 0.3 seconds or 0.5 seconds, it determines that writing is completed and ends the process. Retrieval of stress-resistant data.

In the sub-step 605, after completing the acquisition of the collision pressure data, the fingerprint pen 3 encrypts the encrypted identification data and the collision pressure data to generate a first verification data, and uses the first verification data to transmitted to the handwriting input device 4.

During implementation, in this sub-step 602, after the fingerprint pen 3 determines that the current fingerprint data is correct, in addition to executing the sub-step 604, it re-activates the fingerprint pen 3 every predetermined time interval, such as but not limited to an interval of 0.3 seconds or 0.5 seconds. This sub-step 601 is executed, and it is continued to determine whether the fingerprint data is correct. Once it is determined that the obtained fingerprint data is incorrect, the function of retrieving the collision pressure data will be immediately interrupted, and this sub-step 603 will be executed.

Referring to Figures 1, 2, and 4, the handwriting input verification step 700 includes the following sub-steps:

Sub-step 701. The handwriting input device 4 is caused to sense and obtain a handwriting pattern and touch pressure data of all touch points of the handwriting pattern during the period of being touched. The touch pressure data content includes the touch pressure change trend of all touch points corresponding to each stroke in the handwriting pattern, and the start and end time of the touch pressure change trend of each stroke, that is, the time of each stroke Start and end time. In this embodiment, the handwriting input device 4 is configured to recognize the touch trajectory obtained from each time it senses a touch until the touch is interrupted as one stroke. When the handwriting input device 4 is not touched for more than a predetermined time, such as more than 2 seconds or 3 seconds, the sub-step 701 will be ended, and the sub-step 702 will be continued.

In the sub-step 702, the handwriting input device 4 is allowed to decrypt the first verification data, and determine whether the decrypted contact pressure data is consistent with the touch pressure data of the handwriting pattern, that is, one by one in the order of strokes. Compare and analyze the collision pressure change trend of each stroke in the collision pressure data and the starting and ending time of the pressure change trend. time, whether the touch pressure change trend of each stroke of the touch pressure data of the input handwriting pattern is consistent with the pressure change start and end time.

When the handwriting input device 4 determines that the two do not match, it means that the input handwriting data is not generated by writing with the fingerprint pen 3, and will continue to execute step 703 to generate an instruction message indicating that the writing pressure of the fingerprint pen 3 is incorrect. Instruction messages include, but are not limited to, sounds, lights, images and/or text types.

When the handwriting input device 4 determines that the contact pressure data is consistent with the touch pressure data, it indicates that the handwriting pattern input by it is generated by the fingerprint pen 3 writing on it, and will continue to execute step 704.

In the sub-step 704, the handwriting input device 4 encrypts the encrypted identification data and the handwriting pattern obtained by decryption to generate a second verification data, and sends the second verification data to the authentication server 5.

Referring to Figures 1, 2, and 5, the identity verification step 800 includes the following sub-steps:

In sub-step 801, when receiving the second verification data, the authentication server 5 decrypts the second verification data to obtain the handwriting pattern and the encrypted identification data, and continues to execute sub-step 802.

In this sub-step 802, the authentication server 5 is caused to analyze and compare based on the currently known handwriting analysis and comparison technology to determine whether the handwriting pattern matches one of its stored handwriting templates. The handwriting analysis and comparison technology includes, but is not limited to, handwriting image overlap comparison and handwriting geometric feature comparison. The authenticator server 5 will determine whether When a matching handwriting template is found, it is determined that the comparison fails, and then sub-step 803 is executed to return an instruction message indicating that the comparison fails to the handwriting input device 4 . When it is determined that the handwriting pattern matches one of the handwriting templates, sub-step 804 will be executed.

In this sub-step 804, the authentication server 5 further obtains the personal authentication information corresponding to the handwriting template that matches the comparison, and further decrypts the encrypted identification information to obtain an identity identification information, and decrypts the obtained identity. The identification information is compared with the registered identity information in the personal authentication information, and when the comparison determines that the two are consistent, sub-step 805 is executed, and when it is determined that the two are inconsistent, sub-step 806 is executed.

In this sub-step 805, if the authentication server 5 is the transaction server of the aforementioned online bank, online shopping platform or physical bank and store, the authentication server 5 is caused to generate an instruction message indicating that the authentication is passed. The handwriting input device 4 lets the user know that the identity verification has been completed, and the authentication server 5 will continue to complete the transaction operation. If the authentication server 5 is a third-party authentication server, the authentication server 5 is caused to generate a verification instruction message to the handwriting input device 4 and the corresponding transaction server to let the user know that the verification has been completed. Complete the identity verification and let the corresponding transaction server continue to complete the transaction operation. The aforementioned transaction operations include, but are not limited to, financial transfers, product ordering and payment operations.

In step 806, the authentication server 5 is caused to return an instruction message of failed identity verification to the handwriting input device 4 or the corresponding transaction server to interrupt the transaction operation.

Through the design of the biometric signature verification method, when the user wants to conduct transactions in online banking or online shopping platforms, they must use the fingerprint pen 3 they own on the handwriting input device connected to the authentication server 5 4. Perform identity verification. Similarly, when the user makes a transaction at a physical bank or store, he or she can connect the fingerprint pen 3 owned by the user to the handwriting input device 4 of the bank or store, and use the handwriting input device 4 to Make a written signature to verify your identity. The biometric signature verification method will successively pass the fingerprint data verification of the fingerprint pen 3, and the writing pressure change comparison and handwriting pattern verification of the handwriting input device 4, and then further verify the fingerprint pen by the authentication server 5 3 provides identification information, so the accuracy of identity verification and transaction security can be greatly improved.

Referring to Figures 1, 2, 6, and 7, a second embodiment of the biometric signature verification method of the present invention differs from the first embodiment in: the handwriting input verification step 700 and the identity verification step 800. For convenience of explanation, only the differences between the embodiments will be described below.

In this embodiment, the handwriting input verification step 700 includes a sub-step 701' and a sub-step 704'. In the sub-step 701', the handwriting input device 4 is caused to sense and obtain the handwriting pattern and the touch pressure data. In the sub-step 704', the handwriting input device 4 encrypts the first verification data, the handwriting pattern and the touch pressure data to generate the second verification data, and sends the second verification data to the authentication terminal. Server 5.

The identity verification step 800 includes the sub-step 801 to the sub-step 806, And also includes a sub-step 807 between the sub-step 802 and the sub-step 804.

In the sub-step 807, the authentication server 5 further decrypts the first verification data, and performs a comparative analysis of the writing pressure of the contact pressure data and the touch pressure data. If the writing pressure of the two pressure data is determined If they match, then continue to execute sub-step 804. If it is determined that the writing pressure of the two pressure data does not match, then execute sub-step 803.

In the above two embodiments, in addition to comparing the handwriting pattern and the handwriting template, the writing pressure of the contact pressure data and the touch pressure data are also compared. However, during implementation, in other embodiments of the present invention, In this case, the stylus pen 3 may not sense and obtain the contact pressure data, and the handwriting input device 4 may not sense and obtain the touch pressure data, without performing the aforementioned writing pressure comparison. By simply comparing fingerprint data and handwriting patterns, the accuracy of identity verification and transaction security can be improved.

In addition, in the above two embodiments, when executing the sub-step 605 of the fingerprint verification step 600, the fingerprint pen 3 will encrypt the encrypted identification data and the collision pressure data to generate the first verification data, but when implementing In other embodiments of the present invention, the fingerprint pen 3 can directly integrate the encrypted identification data and the collision pressure data to generate the first verification data, and it is not necessary to encrypt the first verification data. So that in the subsequent handwriting input verification step and the identity verification step, the handwriting input device 4 and the authentication server 5 can directly obtain the encrypted identification data and the collision pressure data in the first verification data, There is no need to decrypt the first verification information. handle.

In summary, through the design of the biometric signature verification method executed by the biometric signature verification system 200, when a user conducts online transactions on an online bank or online shopping platform through a user terminal, or in a physical When banks and stores conduct transactions and identity verification is required, in addition to traditional fingerprint recognition, they can also further verify signature handwriting, and further analyze the writing pressure change trend of fingerprint pens and handwriting input devices. Whether the design is consistent to ensure that the handwriting pattern generated by the signature is indeed signed by the user holding the fingerprint pen, which can effectively prevent forged signatures and prevent the input of forged or illegally obtained handwriting patterns through other technologies. problem. Therefore, the biometric signature verification method and biometric signature verification system 200 of the present invention can indeed significantly improve the accuracy of identity verification and transaction security during transactions. It is a quite innovative invention and can indeed achieve the purpose of the present invention.

However, the above are only examples of the present invention and should not be used to limit the scope of the present invention. All simple equivalent changes and modifications made based on the patent scope of the present invention and the contents of the patent specification are still within the scope of the present invention. within the scope covered by the patent of this invention.

600: Fingerprint verification steps

700: Handwriting input verification steps

800: Identity verification step

Claims (11)

A biosignature verification method includes the following steps: a fingerprint verification step in which a fingerprint pen generates a first fingerprint based on an encrypted identification data stored when it senses and determines that the fingerprint data it obtains is consistent with a fingerprint template it has stored. A verification data; the handwriting input verification step enables a handwriting input device to obtain the first verification data, senses and obtains a handwriting pattern written by the fingerprint stroke, and causes the handwriting input device to convert the first verification data and encrypting the handwriting pattern to generate a second verification data; and the identity verification step causes a certification server to decrypt the second verification data to obtain the first verification information and the handwriting pattern, and determines the handwriting pattern and its storage When a handwriting template in a piece of personal authentication information matches, the encrypted identification information in the first verification information is decrypted to obtain an identity identification information. The biometric signature verification method as described in claim 1, wherein the fingerprint verification step also causes the fingerprint pen to sense and obtain the fingerprint data during the period when the pen tip is pressed after sensing and judging that the fingerprint data obtained is consistent with the fingerprint template. A collision pressure data, and the encrypted identification data and the collision pressure data are encrypted to generate the first verification data. The handwriting input verification step also enables the handwriting input device to obtain all touch points corresponding to the handwriting pattern. The touch pressure data, and the first verification data, the handwriting pattern and the touch pressure data are encrypted to generate the second verification data. The identity verification step is to cause the authentication server to decrypt the second verification data to Obtain the first verification data, the handwriting pattern and the touch pressure data, and determine the pen When the handwriting pattern matches the handwriting template in the personal authentication information, decrypt the first verification data, and when it is determined that the contact pressure data matches the touch pressure data, decrypt the encrypted identification data to obtain the identity recognition material. The biometric signature verification method as described in claim 2, wherein the contact pressure data includes the change trend of the contact pressure experienced when the tip of the fingerprint pen is pressed against an object for writing, and the touch pressure data Including the touch pressure change trend when all the touch points corresponding to the handwriting pattern are pressed while the handwriting input device is writing the handwriting pattern, the identity verification step is to enable the authentication server to determine the fingerprint pen. Whether the changing trend of the touch pressure is consistent with the changing trend of the touch pressure of the handwriting input device. The biometric signature verification method as described in claim 3, wherein the contact pressure data also includes the start and end time of the contact pressure change trend of the fingerprint pen, and the touch pressure data also includes the touch pressure change trend. The identity verification step also enables the authentication server to determine whether the starting and ending times of the changing trend of the contact pressure of the fingerprint pen match the changing trend of the touch pressure of the handwriting input device. The biometric signature verification method as described in any one of claims 1 to 4, wherein the identity verification step also enables the authentication server to determine that the identity identification information is consistent with a registered identity information in the personal authentication information. , generate a verification message indicating that the verification is passed. A biometric signature verification method includes the following steps: a fingerprint verification step, which uses a fingerprint pen to sense and determine whether it has obtained one When the fingerprint data matches one of its stored fingerprint templates, an encrypted identification data stored therein is encrypted to generate a first verification data; the handwriting input verification step causes a handwriting input device to receive and decrypt the first verification data to obtain the The encrypted identification data is sensed and a handwriting pattern written by the fingerprint stroke is obtained, and the handwriting input device encrypts the encrypted identification data and the handwriting pattern to generate a second verification data; and identity verification Steps of causing a certification server to decrypt the second verification data to obtain the encrypted identification data and the handwriting pattern, and when determining that the handwriting pattern matches a handwriting template in a personal authentication data stored therein, decrypt the encrypted identification data. Encrypt identification data to obtain an identification number. The biometric signature verification method as described in claim 6, wherein the fingerprint verification step also causes the fingerprint pen to sense and obtain the fingerprint data during the period when the pen tip is pressed after sensing and judging that the fingerprint data obtained is consistent with the fingerprint template. A collision pressure data, and the encrypted identification data and the collision pressure data are encrypted to generate the first verification data. The handwriting input verification step is to cause the handwriting input device to decrypt the first verification data to obtain the encrypted Identify the data and the contact pressure data, and also enable the handwriting input device to obtain the touch pressure data of all touch points corresponding to the handwriting pattern, and then enable the handwriting input device to determine the contact pressure data and the touch When the pressure data matches, the encrypted identification data and the handwriting pattern are encrypted to generate the second verification data. The biosignature verification method as described in claim 7, wherein the pressure-resistant The data includes the changing trend of the contact pressure experienced when the tip of the fingerprint pen is pressed against an object for writing. The touch pressure data includes all the information corresponding to the handwriting pattern while the handwriting input device is writing the handwriting pattern. The touch pressure change trend when the touch point is pressed. The handwriting input verification step is to enable the handwriting input device to determine whether the touch pressure change trend of the fingerprint pen matches the touch pressure change trend of the handwriting input device. . The biometric signature verification method as described in claim 8, wherein the contact pressure data also includes the start and end time of the contact pressure change trend of the fingerprint pen, and the touch pressure data also includes the touch pressure change trend. The handwriting input verification step also enables the handwriting input device to determine whether the starting and ending times of the touch pressure changing trend of the fingerprint pen match the starting and ending times of the touch pressure changing trend of the handwriting input device. The biometric signature verification method as described in any one of requests 6 to 9, wherein the identity verification step also enables the authentication server to determine that the identity recognition information is consistent with one of the registration information in the personal authentication information, Generates a verification message indicating that the verification has passed. A biometric signature verification system includes a fingerprint pen, a handwriting input device and an authentication server for executing the biometric signature verification method described in any one of claims 1 to 10.

Images